--- title: "#threat-modeling articles | Hashnode" description: "Explore 38 articles tagged #threat-modeling on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/threat-modeling" --- Tag # #threat-modeling 38 posts · 3 followers [Manuela Schrittwieser](https://hashnode.com/@neuralstackms) · [Nov 4](https://hashnode.com/posts/ai-powered-social-engineering-hyper-personalized-phishing-deepfake-vishing-and-automated-disinformation/6aeb26cb49289093e7fab6a1) ### [AI-Powered Social Engineering: Hyper-Personalized Phishing, Deepfake Vishing, and Automated Disinformation](https://neuralstackms.tech/ai-powered-social-engineering-hyper-personalized-phishing-deepfake-vishing-and-automated-disinformation?utm_source=hashnode&utm_medium=feed) Nov 4, 2026 · @Manuela Schrittwieser · NeuralStack | MS – AI Security Engineering Introduction Generative AI has not created a new class of social engineering attack; it has removed the cost constrain 16 min read · [neuralstackms.tech](https://neuralstackms.tech/ai-powered-social-engineering-hyper-personalized-phishing-deepfake-vishing-and-automated-disinformation?utm_source=hashnode&utm_medium=feed) [Ciphemic academia](https://hashnode.com/@ciphemicacademia) · [Oct 10](https://hashnode.com/posts/threat-modeling-vs-penetration-testing-the-80-million-lesson-from-capital-one/6ac9954c4bd71dc727f4256a) ### [Threat Modeling vs. Penetration Testing: The $80 Million Lesson From Capital One](https://ciphemicacademia.hashnode.dev/threat-modeling-vs-penetration-testing-the-80-million-lesson-from-capital-one?utm_source=hashnode&utm_medium=feed) A misconfigured firewall exposed 106 million people. How threat modeling and penetration testing each answer a different question. 13 min read · [ciphemicacademia.hashnode.dev](https://ciphemicacademia.hashnode.dev/threat-modeling-vs-penetration-testing-the-80-million-lesson-from-capital-one?utm_source=hashnode&utm_medium=feed) [18xBan](https://hashnode.com/@18xban) · [Sep 19](https://hashnode.com/posts/data-flow-mapping-trust-boundaries/6aae04cf237fb46b7db0a09a) ### [Data Flow Mapping With Trust Boundaries](https://18xban.hashnode.dev/data-flow-mapping-trust-boundaries?utm_source=hashnode&utm_medium=feed) Eight flows, four boundaries, and a pipeline nobody remembered writing. 18 min read · [18xban.hashnode.dev](https://18xban.hashnode.dev/data-flow-mapping-trust-boundaries?utm_source=hashnode&utm_medium=feed) [Mira Ezz-Eldin](https://hashnode.com/@mira3zzeldin) · [Aug 30](https://hashnode.com/posts/security-principles-a-system-is-not-its-intended-use/6abf9f5a9a105c3d0f1d6215) ### [Security Principles - Part II: A System is Not its Intended Use](https://rootshadow.hashnode.dev/security-principles-a-system-is-not-its-intended-use?utm_source=hashnode&utm_medium=feed) Walking through real STRIDE-driven findings in a biometric fintech payment system and what changes when "does it work" stops being the only question. 8 min read · [rootshadow.hashnode.dev](https://rootshadow.hashnode.dev/security-principles-a-system-is-not-its-intended-use?utm_source=hashnode&utm_medium=feed) [Milan Nikic](https://hashnode.com/@nick79) · [Aug 18](https://hashnode.com/posts/server-side-request-forgery-security-architect-s-perspective-part-2/6a8410e6180319c7dd4d3430) ### [Server-Side Request Forgery: Security Architect's Perspective (Part 2)](https://securitydepth.hashnode.dev/server-side-request-forgery-security-architect-s-perspective-part-2?utm_source=hashnode&utm_medium=feed) A security architect's guide to SSRF threat modeling, egress controls, cloud metadata hardening, compliance, metrics, and incident response. 17 min read · [securitydepth.hashnode.dev](https://securitydepth.hashnode.dev/server-side-request-forgery-security-architect-s-perspective-part-2?utm_source=hashnode&utm_medium=feed) [Harshal Shah](https://hashnode.com/@MrFlexible) · [Jul 19](https://hashnode.com/posts/ai-threat-modeling-a-complete-guide-to-securing-ai-applications/6a5cfacc49343b654f2a0c88) ### [AI Threat Modeling: A Complete Guide to Securing AI Applications](https://delvingwithharshal.hashnode.dev/ai-threat-modeling-a-complete-guide-to-securing-ai-applications?utm_source=hashnode&utm_medium=feed) Learn AI threat modeling using STRIDE, identify AI attack surfaces, assess risks, and secure LLMs, RAG, MCP, and AI agents. 7 min read · [delvingwithharshal.hashnode.dev](https://delvingwithharshal.hashnode.dev/ai-threat-modeling-a-complete-guide-to-securing-ai-applications?utm_source=hashnode&utm_medium=feed) [Mario Gongora](https://hashnode.com/@mariogongora) · [Jun 28](https://hashnode.com/posts/aws-security-agent-pentesting-and-threat-modeling-on-demand-mqy7kv7s/6a417c33fef46ea08a90047d) ### [AWS Security Agent: Pentesting and Threat Modeling On Demand](https://blog.leastprivilege.cloud/aws-security-agent-pentesting-and-threat-modeling-on-demand-mqy7kv7s?utm_source=hashnode&utm_medium=feed) What it actually does, what it costs, and whether it's worth setting up for your repos 8 min read · [blog.leastprivilege.cloud](https://blog.leastprivilege.cloud/aws-security-agent-pentesting-and-threat-modeling-on-demand-mqy7kv7s?utm_source=hashnode&utm_medium=feed) [Scott McMahan](https://hashnode.com/@scottdudeman69) · [Jun 18](https://hashnode.com/posts/agentic-ai-threat-modeling-securing-autonomous-ai-systems/6a34099487b6daf87cf7bc5c) ### [Agentic AI Threat Modeling: Securing Autonomous AI Systems](https://aitransformeronline.hashnode.dev/agentic-ai-threat-modeling-securing-autonomous-ai-systems?utm_source=hashnode&utm_medium=feed) Learn how agentic AI changes the cybersecurity landscape. Explore key threats, attack vectors, and threat modeling strategies for securing autonomous AI agents and enterprise AI systems. 2 min read · [aitransformeronline.hashnode.dev](https://aitransformeronline.hashnode.dev/agentic-ai-threat-modeling-securing-autonomous-ai-systems?utm_source=hashnode&utm_medium=feed) [Nivethitha Kumaravelu](https://hashnode.com/@eternalnebula) · [May 23](https://hashnode.com/posts/adapting-matt-pocock-s-grill-with-docs-skill-to-create-a-threat-modeling-skill/6a1207311a3cf7bffc503728) ### [Adapting Matt Pocock's grill-with-docs skill to create a Threat Modeling skill](https://nebulablogs.com/adapting-matt-pocock-s-grill-with-docs-skill-to-create-a-threat-modeling-skill?utm_source=hashnode&utm_medium=feed) I was working on a new app and came across Matt Pocock's /grill-with-docs skill that works as a structured interrogation tool that stress-tests your plan against your project's domain model, cross-ref 5 min read · [nebulablogs.com](https://nebulablogs.com/adapting-matt-pocock-s-grill-with-docs-skill-to-create-a-threat-modeling-skill?utm_source=hashnode&utm_medium=feed) [Milan Nikic](https://hashnode.com/@nick79) · [May 11](https://hashnode.com/posts/os-command-injection-security-architect-s-perspective-part-2/6a01c3d3fca21b0d4b12e751) ### [OS Command Injection: Security Architect's Perspective (Part 2)](https://securitydepth.hashnode.dev/os-command-injection-security-architect-s-perspective-part-2?utm_source=hashnode&utm_medium=feed) Architecture and program controls for preventing OS command injection: threat modeling, risk scoring, container hardening, and incident response. 22 min read · [securitydepth.hashnode.dev](https://securitydepth.hashnode.dev/os-command-injection-security-architect-s-perspective-part-2?utm_source=hashnode&utm_medium=feed)